WWII Rescue

WWII Rescue is an adware bundler that installs several other software’s with itself Adware-SaveNow,Adware-WhenUSearch (WhenU) , NDotNet. and the adware that it installs with itself shows advertising and deceptive warnings.

General information:

Malware Name: WWII Rescue
Malware Type: Adware Bundler
Company Name: free-games.to
Company URL: http://www.free-games.to/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

free-games.to provides you the software WWII Rescue that is an is fully 3D with great graphics and excellent gameplay. You won t get bored as there s always an enemy behind the next corner. A savage 3D first person shooter. You re dropped behind enemy lines where you must shoot your way single handedly across the battlefield to rescue your soldiers from the hands of the enemy.

Spyware Description:

WWII Rescue is an adware bundler that installs several other software’s with itself Adware-SaveNow,Adware-WhenUSearch (WhenU) , NDotNet. and the adware that it installs with itself shows advertising and deceptive warnings.

Characteristics/Symptoms:

    -> It installs several other software’s with itself like Adware-SaveNow,Adware-WhenUSearch (WhenU) and NDotNet. -> The adware that it installs with itself shows advertising and deceptive warnings.

Additional information might be found here:

google Search at Google for WWII Rescue
bing Search at Bing for WWII Rescue
yahoo Search at Yahoo for WWII Rescue

Processes Running:

WWII.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\WWII Rescue\Files\entitybank\ww2\wall furniture\lightswitch_a.bin 1381 BIN File
C:\Program Files\WWII Rescue\Files\entitybank\ww2\wall furniture\sign_b.bin 579 BIN File
C:\Program Files\WWII Rescue\Files\gamebank\Wwii\titlepage.fpi 785 FPI File

Folder information Created after Installation:

Folder Location
C:\Program Files\WWII Rescue\Files\gamecore\Bullethole
C:\Program Files\WWII Rescue\Files\gamecore\decals\smoke

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WWII: Rescue
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WWII: Rescue DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WWII: Rescue UninstallString